use-secure-tls-policy
Explanation
You should not use outdated/insecure TLS versions for encryption. You should be using TLS v1.2+.
Possible Impact
Outdated SSL policies increase exposure to known vulnerabilities
Suggested Resolution
Use the most modern TLS/SSL policies available
Insecure Example
The following example will fail the aws-api-gateway-use-secure-tls-policy check.
resource "aws_api_gateway_domain_name" "bad_example" {
security_policy = "TLS_1_0"
}
Secure Example
The following example will pass the aws-api-gateway-use-secure-tls-policy check.
resource "aws_api_gateway_domain_name" "good_example" {
security_policy = "TLS_1_2"
}